PHP Web Host - Quality Web Hosting For All PHP Applications $35/month $250/year (Unlimited) - $25/month - 200,000 impressions - Your Ad Could be Here - Click For Details
  Login or Register
 • Home • Downloads • Your Account • Forums • 
Site Navigation

Home:
 
Donate o Meter
Help Keep Our Servers Online AND Our Services Free!
Make donations with PayPal!
Donations
 
Please Link To Me!
 
Quality Web Hosting For All PHP Applications
Quality PHP Web Host!

Great Reviews!
Need help setting up your website, installing Apache, PHP, MySQL, or RavenNuke(tm)?
Need help customizing or designing scripts?
Please contact us via the Contact Us option for further details and pricing.
Link to Me

RavenPHPScripts

RavenPHPScripts

There are more Link To Me icons here.
 
Site Info v2.2.2 ©
Your IP: 38.107.179.231

Welcome, Anonymous
Nickname
Password
Security Code:
Security Code
Type Security Code:

· Register
· Lost Password
Server Date/Time
9 February 2012 23:50:05 EST (GMT -5)
 
SquirrelMail Package Compromise 
Security

SECUNIA ADVISORY ID: SA28095

VERIFY ADVISORY: http://secunia.com/advisories/28095/

CRITICAL: Moderately critical

IMPACT: Unknown

SOFTWARE: SquirrelMail 1.x - http://secunia.com/product/288/

DESCRIPTION: A package compromise with unknown impact has been reported in SquirrelMail. The vendor reports that the squirrelmail package has been modified post release. This affects 1.4.12 packages downloaded after 8th December 2007.



SOLUTION: Check the MD5 sum of the package and apply the corrected package if they do not match.
http://squirrelmail.org/download.php


ea5e750797628c9f0f247009f8ae0e14 squirrelmail-1.4.12.tar.bz2
d17c1d9f1ee3dde2c1c21a22fc4f9d0e squirrelmail-1.4.12.tar.gz
3f6514939ea1ebf69f6f8c92781886ab squirrelmail-1.4.12.zip

PROVIDED AND/OR DISCOVERED BY: Reported by the vendor.

ORIGINAL ADVISORY:
http://squirrelmail.org/index.php
http://archives.neohapsis.com/archives/bugtraq/2007-12/0180.html
Posted on Friday, December 14, 2007 @ 12:31:54 EST by Raven
 
Related Links
· More about Security
· News by Raven
Most read story about Security:
PHP-Nuke *eid* SQL Injection Vulnerability
 
Article Rating
Average Score: 0
Votes: 0

Please take a second and vote for this article:

Excellent
Very Good
Good
Regular
Bad
 
Options

 Printer Friendly Page  Printer Friendly Page

 Send to a Friend  Send to a Friend
 
 

All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters, all the rest © 2002-2011 by Raven

You can syndicate our news using the file xml

CSE HTML Validator Helped Clean up This Page! [Valid RSS] valid RSS 2.0 Valid robots.txt Stop Spam Harvesters, Join Project Honey Pot

Website engines core code is © copyright by PHP-Nuke but has been heavily patched and modified by myself and others.
PHP-Nuke is a free software released under the GNU/GPL.

:: fisubice phpbb2 style by Daz :: PHP-Nuke theme by www.nukemods.com ::
:: fisubice Theme Modified by the RavenNuke™ Team ::

:: W3C CSS Compliance Validation :: W3C HTML 4.01 Transitional Compliance Validation ::

zerosum